EUVD-2025-37371

By manipulating the Signal Level Attenuation Characterization SLAC protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close...

CVE-2025-12357

CVE-2025-12357 describes a vulnerability in EV charging systems that use ISO 15118-2, where an attacker can manipulate the Signal Level Attenuation Characterization (SLAC) protocol via spoofed measurements to stage a near-field MITM attack between an electric vehicle and charging stations. The at...